Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231401 10 危険 virtualsystem - VirtualSystem Htaccess Passwort Generator の generate.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1013 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
231402 7.5 危険 vs-gastebuch - VS-Gastebuch の functions_inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1011 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
231403 6.8 警告 zebrafeeds - ZebraFeeds における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1010 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
231404 7.5 危険 phpcc - phpCC の nickpage.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-0985 2012-12-20 18:19 2007-02-16 Show GitHub Exploit DB Packet Storm
231405 4.3 警告 taskfreak - TaskFreak! の error.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0982 2012-12-20 18:19 2007-02-16 Show GitHub Exploit DB Packet Storm
231406 7.5 危険 webtester - WebTester における SQL インジェクションの脆弱性 - CVE-2007-0970 2012-12-20 18:19 2007-02-15 Show GitHub Exploit DB Packet Storm
231407 6.8 警告 webtester - WebTester におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0969 2012-12-20 18:19 2007-02-15 Show GitHub Exploit DB Packet Storm
231408 6.8 警告 scriptsez.net - Scriptsez.net Virtual Calendar におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0952 2012-12-20 18:19 2007-02-14 Show GitHub Exploit DB Packet Storm
231409 5 警告 virtual calendar - Virtual Calendar におけるエンコードされたパスワードをダウンロードされる脆弱性 - CVE-2007-0928 2012-12-20 18:19 2007-02-14 Show GitHub Exploit DB Packet Storm
231410 7.5 危険 BitTorrent, Inc. - uTorrent におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-0927 2012-12-20 18:19 2007-02-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293911 - wordpress pay-with-tweet Multiple cross-site scripting (XSS) vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) title, or (3… CWE-79
Cross-site Scripting 		CVE-2012-5349 2024-11-21 10:44 2012-10-10 Show GitHub Exploit DB Packet Storm
293912 - wilson_steven mangosweb_enhanced SQL injection vulnerability in MangosWeb Enhanced 3.0.3 allows remote attackers to execute arbitrary SQL commands via the login parameter in a login action to index.php. CWE-89
SQL Injection 		CVE-2012-5348 2024-11-21 10:44 2012-10-10 Show GitHub Exploit DB Packet Storm
293913 - tinywebgallery tinywebgallery TinyWebGallery 1.8.3 allows remote attackers to execute arbitrary code via shell metacharacters in the command parameter to (1) inc/filefunctions.inc or (2) info.php. NVD-CWE-noinfo
CVE-2012-5347 2024-11-21 10:44 2012-10-10 Show GitHub Exploit DB Packet Storm
293914 - bencemeszaros wp-livephp Cross-site scripting (XSS) vulnerability in wp-live.php in the WP Live.php module 1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. NOTE: some o… CWE-79
Cross-site Scripting 		CVE-2012-5346 2024-11-21 10:44 2012-10-10 Show GitHub Exploit DB Packet Storm
293915 - kepler_lam iptools Buffer overflow in the Remote command server (Rcmd.bat) in IpTools (aka Tiny TCP/IP server) 0.1.4 allows remote attackers to cause a denial of service (crash) via a long string to TCP port 23. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-5345 2024-11-21 10:44 2012-10-10 Show GitHub Exploit DB Packet Storm
293916 - kepler_lam iptools Directory traversal vulnerability in the WebServer (Thttpd.bat) in IpTools (aka Tiny TCP/IP server) 0.1.4 allows remote attackers to read arbitrary files via a .. (dot dot) in a HTTP request. CWE-22
Path Traversal 		CVE-2012-5344 2024-11-21 10:44 2012-10-10 Show GitHub Exploit DB Packet Storm
293917 - limny limny Cross-site scripting (XSS) vulnerability in admin/login.php in Limny 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO, related to the "PHP_SELF" variable. CWE-79
Cross-site Scripting 		CVE-2012-5343 2024-11-21 10:44 2012-10-10 Show GitHub Exploit DB Packet Storm
293918 - michau_enterprises_llc commonsense_cms Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) special.php, (2) article.php, or (3) cat2.php. CWE-89
SQL Injection 		CVE-2012-5342 2024-11-21 10:44 2012-10-10 Show GitHub Exploit DB Packet Storm
293919 - otterware statit Multiple cross-site scripting (XSS) vulnerabilities in statistik.php in Otterware StatIt 4 allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter, (2) show paramet… CWE-79
Cross-site Scripting 		CVE-2012-5341 2024-11-21 10:44 2012-10-10 Show GitHub Exploit DB Packet Storm
293920 - adobe flash_player
flash_player_for_android
adobe_air
adobe_air_sdk 		Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and be… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-5272 2024-11-21 10:44 2012-10-9 Show GitHub Exploit DB Packet Storm